e37d3ed04080588fa993b06e35b50ed396aef39cc058aae3b36600a9c176d994

General

Target

e37d3ed04080588fa993b06e35b50ed396aef39cc058aae3b36600a9c176d994
Size

350KB
Sample

221108-v7m8maaae3
MD5

0b30dcf3e2af94c3e3e6e377d904d0d0
SHA1

e662c515dc57056d0703bafe6d9b3c7c25156b47
SHA256

e37d3ed04080588fa993b06e35b50ed396aef39cc058aae3b36600a9c176d994
SHA512

03ddf3228cb95f425155ed5721165ec139ed2e75c277fbc2f848b1802e7bce20395470a07d81631ce35ef6ff0d4aedcca7d3226a8fe5b2c6bad189070bc6d0c3
SSDEEP

6144:5IyXu7IEBSsQ9ElMwm60lmqs7MTRGA3h3GVqdppJXEGhBukJF/KAwxFUOWdEmh:u3BdQLL4BE93NGVYZX9BukJlwxSJdEm

Score

8^/10

Malware Config

Targets

- Target
  
  e37d3ed04080588fa993b06e35b50ed396aef39cc058aae3b36600a9c176d994
- Size
  
  350KB
- MD5
  
  0b30dcf3e2af94c3e3e6e377d904d0d0
- SHA1
  
  e662c515dc57056d0703bafe6d9b3c7c25156b47
- SHA256
  
  e37d3ed04080588fa993b06e35b50ed396aef39cc058aae3b36600a9c176d994
- SHA512
  
  03ddf3228cb95f425155ed5721165ec139ed2e75c277fbc2f848b1802e7bce20395470a07d81631ce35ef6ff0d4aedcca7d3226a8fe5b2c6bad189070bc6d0c3
- SSDEEP
  
  6144:5IyXu7IEBSsQ9ElMwm60lmqs7MTRGA3h3GVqdppJXEGhBukJF/KAwxFUOWdEmh:u3BdQLL4BE93NGVYZX9BukJlwxSJdEm
Score

8^/10

adware discovery exploit persistence stealer upx
- Drops file in Drivers directory
- Possible privilege escalation attempt
  exploit
- Sets service image path in registry
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Deletes itself
- Modifies file permissions
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

1

T1176

Registry Run Keys / Startup Folder

1

T1060

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops file in Drivers directory

Possible privilege escalation attempt

Sets service image path in registry

UPX packed file

Deletes itself

Modifies file permissions

Installs/modifies Browser Helper Object

Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2